CVEvulnerability

CVE-2015-3043

9.8 CRITICAL Known exploited Published 2015-04-14 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Adobe Flash Player Memory Corruption Vulnerability — Adobe Flash Player

A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.

Added to KEV
2022-03-03
Remediation due
2022-03-24
Ransomware use
Unknown
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2015-3043
Status
Analyzed
Published
2015-04-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-787

Description

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.

Affected configurations

• adobe flash player (< 11.2.202.457) • adobe flash player (< 13.0.0.281) • adobe flash player (>= 14.0.0.125 < 17.0.0.169) • novell suse linux enterprise desktop 11.0 • novell suse linux enterprise desktop 12.0 • novell suse linux enterprise workstation extension 12.0 • opensuse evergreen 11.4 • opensuse opensuse 13.1 • opensuse opensuse 13.2 • redhat enterprise linux desktop 5.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux eus 6.6 • redhat enterprise linux server 5.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server aus 6.6 • redhat enterprise linux server from rhui 5.0 • redhat enterprise linux server from rhui 6.0 • redhat enterprise linux workstation 5.0 • redhat enterprise linux workstation 6.0

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References